Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: cGYKxzXqahg2ROgA1YOJ160r/3qx2UFRaz8aOoFApNE=
Subject key identifier: A1:D3:71:DA:7A:A5:AC:D7:4B:FD:F2:D6:94:8C:48:A2:55:C5:90:9A
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 019F921156E68CAD1C099E30E16D81B57FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 0B20
Signing time: Fri 24 Jul 2026 03:00:37 +0000
Manifest this update: Fri 24 Jul 2026 03:00:37 +0000
Manifest next update: Sat 25 Jul 2026 03:00:37 +0000
Files and hashes: 1: Q3uvcJk1aivu7ToH0eZwM2MePrY.roa (hash: j0i6DOSkvpYiLwStrAAsU53hjHyyfEDy63fjeik32sA=)
2: QBmUJCRtL8qMx8nsM_8h7M8Ntmk.roa (hash: oRqg090yxLTopHF59OGl/QFkoOTyNIVLSNChAWZxm8c=)
3: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: 8Z7vKlg9lfiqJpxta3FajE1mNUeZZqu7lH1VjJAj8LU=)
4: _6K6ekLgN63ACFr7Nc4QqX8mO9Q.roa (hash: GR7VM23RiAdX5cDnkEi212fYKZ9tRoD66kVKX08kLSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:56:e6:8c:ad:1c:09:9e:30:e1:6d:81:b5:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Jul 24 03:00:37 2026 GMT
Not After : Jul 25 03:00:37 2026 GMT
Subject: CN=a1d371da7aa5acd74bfdf2d6948c48a255c5909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:03:50:ba:ea:a7:77:26:98:2e:26:46:3d:56:
1d:ba:9e:82:88:96:3c:32:4e:c5:b5:71:18:49:3d:
97:03:ff:63:fd:20:4a:98:05:d6:36:4c:b8:eb:bc:
01:df:fc:9c:ce:79:ae:58:d8:a3:c1:2c:19:02:8e:
53:b9:87:63:e3:ed:61:e6:5a:e8:5e:3a:e0:c7:84:
68:87:c1:d5:a7:34:70:34:47:b1:92:78:59:34:6b:
55:b2:ad:24:4c:51:fa:5a:c5:91:7a:e4:15:bc:eb:
00:ab:86:cd:f9:91:b0:c4:2f:fd:7f:a5:56:f7:0c:
a1:9f:c2:9a:6f:3f:30:15:6d:0f:6e:ee:29:5b:26:
db:b3:c0:b7:22:7e:1e:ab:25:9b:f9:70:61:67:9f:
5a:7e:9d:4a:70:c9:43:33:04:64:a2:15:e3:76:91:
32:b3:cf:e8:0a:f6:2d:4d:dd:5c:29:34:2c:b6:12:
34:f6:6c:a9:a0:58:3d:63:9b:02:20:26:c7:85:f1:
69:7e:a9:eb:83:a7:8a:a7:0e:40:de:c1:df:5f:18:
c4:f0:78:4e:9f:98:e2:b0:89:f3:33:1a:7c:a3:7b:
26:f9:51:e1:8c:38:53:11:e5:16:ea:01:4b:a9:96:
cf:1a:bc:8e:75:c8:4c:82:00:7a:9b:e4:39:d0:23:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:71:DA:7A:A5:AC:D7:4B:FD:F2:D6:94:8C:48:A2:55:C5:90:9A
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:63:2e:04:d6:1d:3b:f8:8b:2e:72:c8:18:2e:ce:b6:ef:9f:
e3:5d:1f:67:66:f9:36:b6:45:35:8b:23:39:68:ad:65:3b:9f:
89:28:bf:fa:ca:68:15:39:da:10:62:0c:90:fe:ef:3c:d7:30:
70:a7:8e:23:fb:82:a3:de:18:93:47:f9:08:67:f0:1d:42:0e:
5f:4a:0b:5b:de:49:03:10:ae:93:6e:e5:06:09:45:13:81:c7:
75:16:e8:12:86:4f:6d:f8:91:f2:9b:6c:f7:fc:b3:85:ad:5b:
c8:73:e5:4c:6e:4f:8c:7f:05:d0:92:92:a1:ba:12:8b:ce:1e:
54:e9:06:10:56:fe:db:c3:1c:e3:6c:7d:1d:1d:af:98:fd:20:
8c:6f:a2:90:11:9d:0b:62:55:8d:49:24:41:23:04:b9:5d:0a:
a4:f9:1e:6b:77:d8:27:53:44:5c:68:2b:7b:43:65:84:33:e9:
d6:10:cc:ed:7a:1d:fa:f3:10:be:f4:31:07:b5:8b:67:a7:b8:
5a:47:40:aa:9e:80:37:84:ef:88:1d:61:76:ef:05:98:47:90:
ec:08:bf:3d:eb:3e:78:3a:fe:ad:48:0b:3c:97:ad:29:37:e3:
cd:02:19:cf:44:96:a0:73:3d:e8:6a:cd:c4:5d:c8:d0:82:fd:
9f:15:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:35:24 2026 by rpki-client